Media
5344499d-c183-4164-a52c-0dca7873f63d
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2023-6741
WP Customer Area <= 8.2.1 - Insecure Direct Object Reference to Address Modification
Media
CVE-2023-7084
Voting Record <= 2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2024-0237
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.8 (Pro) & <= 2.2.7 (Free) - Missing Authorization via eventon_save_virtual_event_settings
Alta
CVE-2024-22135
Order Export & Order Import for WooCommerce <= 2.4.3 - Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_file
Media
CVE-2023-7071
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-7070
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
f2b5213d-fdc5-4c98-9a05-15d83bd7308f
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
Media
CVE-2024-0187
Community by PeepSo <= 6.3.1.1 - Reflected Cross-Site Scripting
Media
d89918e1-b525-4d32-9b11-5e014eb02c16
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery
Media
CVE-2023-6242
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
Crítica
CVE-2023-51409
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload
Media
CVE-2023-6244
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings
Media
CVE-2023-7125
Community by PeepSo <= 6.3.1.1 - Cross-Site Request Forgery to User Post Creation
Media
66377ee2-cc87-4cfe-a4e4-cef4459bf2ec
Seraphinite Alternative Slugs Manager <= 1.3 - Cross-Site Request Forgery
Media
CVE-2023-6994
List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2023-6979
Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
Media
CVE-2023-6158
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
Media
1453815d-4e28-41ec-9aa4-4fd2899c619a
Happy Elementor Addons <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-6582
ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure
Media
CVE-2023-6830
Formidable Forms <= 6.7 - HTML Injection
Media
CVE-2024-29802
Football pool <= 2.11.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-22136
Droit Elementor Addons <= 3.1.5 - Cross-Site Request Forgery
Media
CVE-2023-6594
WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.